This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P7jLLEumNOCacqjaHhNhIWzVAXE.roa File: P7jLLEumNOCacqjaHhNhIWzVAXE.roa (raw, json) Hash identifier: KdxwCOBA/oi/0iN9zbzjdsl1Po4WlLTiK7G0xbk7jZ4= Subject key identifier: 3F:B8:CB:2C:4B:A6:34:E0:9A:72:A8:DA:1E:13:61:21:6C:D5:01:71 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019A8192E0FDE57AC06CFD61A62435F0F0FA Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P7jLLEumNOCacqjaHhNhIWzVAXE.roa Signing time: Fri 14 Nov 2025 08:54:38 +0000 ROA not before: Fri 14 Nov 2025 08:54:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213999 IP address blocks: 45.147.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:92:e0:fd:e5:7a:c0:6c:fd:61:a6:24:35:f0:f0:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 14 08:54:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3fb8cb2c4ba634e09a72a8da1e1361216cd50171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f9:aa:be:bd:f2:66:e7:53:65:7c:1e:52:93: f6:9b:26:a1:d7:cb:db:ed:85:93:e4:66:75:f4:46: 1b:79:4a:d7:36:1b:cb:ae:d6:d5:95:af:07:5e:ad: 99:97:5d:c6:66:79:e9:6c:a7:6d:3b:89:c9:40:d3: 62:9a:15:8d:45:07:91:63:cb:18:50:25:2c:cc:78: a6:92:80:b4:97:a9:f5:57:fc:88:4b:5a:86:d4:dd: 7e:32:83:00:85:dc:f2:ce:02:b7:c3:09:0b:51:8c: 43:ad:df:4f:01:c3:d5:cd:4c:ab:4d:92:da:82:97: 3a:8a:06:b4:53:05:f0:b7:ed:5e:f7:0a:a9:a5:4d: 96:22:bc:c7:6c:5a:ba:40:ca:a8:10:b0:b8:65:2e: 2f:5a:e7:ed:3e:21:ae:3e:56:9e:73:c8:08:d8:cc: 57:c1:33:21:af:8c:b5:07:5f:e8:4c:38:21:06:fa: cc:17:c2:5b:0a:ee:56:9f:10:22:0e:89:28:bf:d5: f1:8d:f2:99:e8:0b:a1:e7:2e:53:b0:be:31:0d:df: c7:a6:a5:17:5b:d1:ba:c3:1d:c1:ea:bb:a6:f5:b8: 88:e8:4a:b8:73:1a:05:46:61:15:b1:25:ad:8e:88: d9:8c:2d:20:8e:6d:5a:68:b7:58:91:da:ed:00:c6: 19:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B8:CB:2C:4B:A6:34:E0:9A:72:A8:DA:1E:13:61:21:6C:D5:01:71 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P7jLLEumNOCacqjaHhNhIWzVAXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.31.0/24 Signature Algorithm: sha256WithRSAEncryption 29:f6:6f:08:fc:81:ec:9b:98:34:c9:49:91:0c:96:04:47:1e: 07:5e:c8:bd:0a:bb:9f:8e:d0:92:87:cb:d6:a6:bf:08:84:c1: c7:ad:ce:1a:35:25:e9:1e:4b:e0:23:e4:05:76:97:4c:73:ab: 92:ce:21:7b:8e:6e:7d:7e:59:c0:12:60:47:a7:ae:50:f6:ba: 4a:5a:d1:71:24:42:d7:8c:dc:b8:05:79:67:96:19:7f:03:f1: 98:92:69:ae:72:24:67:82:4d:7e:7c:0e:88:89:90:12:cd:24: 15:26:39:a8:3e:d8:b5:26:3f:33:c5:e8:b6:e1:cb:05:c4:dc: 64:44:a7:75:ba:aa:f4:39:26:8f:d4:a4:a9:0f:99:06:73:b6: 9f:e7:1e:db:2e:c7:78:1a:58:66:f0:f1:84:33:18:9f:e5:88: 6b:87:1d:b5:29:d3:3b:b5:a8:9f:a4:a4:83:57:69:e1:2e:0f: b9:86:64:a6:90:64:c0:6a:dd:c9:07:29:c7:dd:c4:74:8a:ca: 2a:b1:11:66:3d:4e:65:42:b6:88:a0:85:d4:35:1a:52:d8:b6: ff:2f:82:1c:e5:2e:19:71:e4:67:92:c4:4f:c0:3e:b4:47:1a: 2c:5e:5f:ce:16:40:85:82:f2:3e:36:b6:d2:c3:98:9e:5a:47: 7f:8f:3c:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqBkuD95XrAbP1hpiQ18PD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTE0MDg1NDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmI4Y2IyYzRiYTYzNGUwOWE3MmE4ZGExZTEzNjEyMTZjZDUwMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPmqvr3yZudTZXweUpP2myah18vb 7YWT5GZ19EYbeUrXNhvLrtbVla8HXq2Zl13GZnnpbKdtO4nJQNNimhWNRQeRY8sY UCUszHimkoC0l6n1V/yIS1qG1N1+MoMAhdzyzgK3wwkLUYxDrd9PAcPVzUyrTZLa gpc6iga0UwXwt+1e9wqppU2WIrzHbFq6QMqoELC4ZS4vWuftPiGuPlaec8gI2MxX wTMhr4y1B1/oTDghBvrMF8JbCu5WnxAiDokov9XxjfKZ6Auh5y5TsL4xDd/HpqUX W9G6wx3B6rum9biI6Eq4cxoFRmEVsSWtjojZjC0gjm1aaLdYkdrtAMYZGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD+4yyxLpjTgmnKo2h4TYSFs1QFxMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvUDdqTExFdW1OT0NhY3FqYUhoTmhJV3pWQVhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZMfMA0G CSqGSIb3DQEBCwUAA4IBAQAp9m8I/IHsm5g0yUmRDJYERx4HXsi9CrufjtCSh8vW pr8IhMHHrc4aNSXpHkvgI+QFdpdMc6uSziF7jm59flnAEmBHp65Q9rpKWtFxJELX jNy4BXlnlhl/A/GYkmmuciRngk1+fA6IiZASzSQVJjmoPti1Jj8zxei24csFxNxk RKd1uqr0OSaP1KSpD5kGc7af5x7bLsd4Glhm8PGEMxif5Yhrhx21KdM7taifpKSD V2nhLg+5hmSmkGTAat3JBynH3cR0isoqsRFmPU5lQraIoIXUNRpS2Lb/L4Ic5S4Z ceRnksRPwD60RxosXl/OFkCFgvI+NrbSw5ieWkd/jzz5 -----END CERTIFICATE-----Generated at Sat Dec 6 18:07:21 2025 by rpki-client